Bump virtualenv from 21.0.0 to 21.1.0

[dependabot]

Bumps virtualenv from 21.0.0 to 21.1.0.

Release notes

Sourced from virtualenv's releases.

21.1.0

What's Changed

• add comprehensive type annotations across the entire codebase by @​rahuldevikar in pypa/virtualenv#3076

Full Changelog: pypa/virtualenv@21.0.0...21.1.0

Changelog

Sourced from virtualenv's changelog.

Features - 21.1.0

• Add comprehensive type annotations across the entire codebase and ship a PEP 561 py.typed marker so downstream consumers and type checkers recognize virtualenv as an inline-typed package - by :user:rahuldevikar. (:issue:3075)

---

v21.0.0 (2026-02-25)

---

Commits

• 404a3e5 release 21.1.0
• 981d87c add comprehensive type annotations across the entire codebase (#3076)
• 17d98ba Add security policy
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

🤖 Claude Code Review

PR Code Review

Diff Summary: Bumps virtualenv from 21.0.0 to 21.1.0 in the development dependencies.

---

Code Quality

• ✅ Style guide — Single-line version bump, nothing to evaluate.
• ✅ No commented-out code
• ✅ Meaningful variable names — N/A
• ✅ DRY principle — N/A
• ✅ Defects — No logic changes; pure dependency version bump. No bugs or security concerns introduced.
• ✅ CLAUDE.md — No issues; project config is general and environment-agnostic.

Testing

• ✅ Unit/integration tests — No code changes requiring new tests.
• ✅ Edge cases — N/A
• ⚠️ Test coverage — Not applicable to this change, but no coverage regression expected.

Documentation

• ✅ README — No update needed for a dev dependency bump.
• ✅ API docs — N/A
• ✅ Inline comments — N/A
• ⚠️ CHANGELOG.md — No CHANGELOG.md update included. Automated dependency bumps are often excluded, but worth confirming this is intentional per project convention.
• ✅ Markdown formatting — N/A

Security

• ✅ No hardcoded credentials
• ✅ No license files (.lic) or AQAAAD-prefixed strings
• ✅ virtualenv is a dev-only dependency — not included in production builds, so the blast radius of any issue is minimal.

---

Summary

This is a low-risk automated dependency bump. The only minor note is the absence of a CHANGELOG.md entry — acceptable if the project convention is to exclude automated bumps from the changelog. No action required unless your policy mandates changelog entries for all dependency updates.

Automated code review analyzing defects and coding standards

[github-actions]

🤖 Claude Code Review

PR Code Review

Summary: This is a minimal dependency bump — virtualenv from 21.0.0 to 21.1.0 in the development dependencies.

---

Code Quality

• ✅ Style guide: Single-line change, follows existing formatting conventions in pyproject.toml.
• ✅ No commented-out code: N/A
• ✅ Meaningful variable names: N/A
• ✅ DRY principle: N/A
• ✅ Defects: No logic issues. This is a patch/minor version bump in a dev dependency only (not a runtime dependency), so it has no impact on production behavior.
• ✅ CLAUDE.md: No issues — the project config is appropriate for general use.

Testing

• ✅ No new code paths introduced; existing tests remain sufficient for a dev dependency bump.

Documentation

• ✅ README: No update needed.
• ✅ CHANGELOG.md: This is an automated dependency bump; no changelog entry is required.
• ✅ Markdown: No markdown changes.

Security

• ✅ No hardcoded credentials
• ✅ No license files (.lic) or AQAAAD-prefixed strings
• ✅ virtualenv 21.1.0 is a development-only dependency with no runtime security implications.

---

Verdict: APPROVE — Clean, low-risk dependency update with no issues.

Automated code review analyzing defects and coding standards